This Privacy Policy explains how [Legal Entity Name] ("Inkwell") collects and processes personal data when you use inkwell.example (the "Service").
1. Data We Collect
- Account data: email, display name, avatar, authentication provider identifiers.
- Creator content: characters, worlds, story arcs, comics, art styles, and generated images you save.
- Purchase data: transaction records, purchased comics, subscription status. Card details are handled by Stripe — we never see them.
- Usage data: page views, likes, and views on comics you interact with, used to power discovery and rankings.
- Technical data: IP address, browser/device metadata, and cookies necessary to run the Service.
2. How We Use It
- Provide and improve the Service.
- Process payments and pay creators.
- Prevent fraud, abuse, and violations of our Terms.
- Send transactional email (receipts, security alerts, password resets).
- Comply with legal obligations.
3. Legal Bases (GDPR / UK GDPR)
We rely on contract (to deliver the Service you signed up for), legitimate interests (to secure and improve the Service), consent (for optional communications), and legal obligation (tax, accounting).
4. Subprocessors
We use the following processors to run the Service:
- Supabase — authentication, database, and file storage.
- Stripe — payment processing, tax calculation, and payouts.
- Lovable — hosting and AI gateway used to generate imagery.
- Cloudflare — content delivery and DDoS protection.
5. Retention
We retain account and creator content for as long as your account is active. Purchase and tax records are retained for the period required by law (typically 7 years). You may request deletion at any time (see Section 8).
6. International Transfers
Your data may be processed in the United States or the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
7. Cookies
We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. If we add analytics in the future, we will present a consent banner.
8. Your Rights
Depending on where you live, you may have rights to access, correct, delete, port, or object to processing of your personal data. Email privacy@inkwell.example to exercise them. You may also lodge a complaint with your local data protection authority.
9. Children
Inkwell is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect their personal data.
10. Changes
We will notify you of material changes in-app or by email before they take effect.
11. Contact
Data controller: [Legal Entity Name], [Business Address]. Contact: privacy@inkwell.example.